VULNERABILITY INTELLIGENCE

CVE-2006-2025

CVSS score6.5 NONE
EPSS probability10.77%
CISA KEVNot currently listed
Published2006-04-25
Last modified2026-06-16
CVSS vectorAV:N/AC:L/Au:S/C:P/I:P/A:P

Description

Integer overflow in the TIFFFetchData function in tif_dirread.c for libtiff before 3.8.1 allows context-dependent attackers to cause a denial of service and possibly execute arbitrary code via a crafted TIFF image.

Weakness classification

  • nvd@nist.gov: NVD-CWE-Other

Primary references